Nondestructive Fault Injection Method Supported by Airborne Redundancy Computer for Fault Tolerant Verification

Abstract

The invention provides a non-destructive fault injection method for supporting fault tolerance verification of an on-board redundancy computer. A main program of a channel of the on-board redundancy computer is taken as the target object for injecting a fault. The non-destructive fault injection method includes the steps that a fault injection interaction terminal edits fault content and sends a fault injection command to a fault injection interrupt handling routine; the fault injection interaction terminal sends a fault injection interrupt request and enables the fault injection interrupt handling routine through interrupt interlock control; and the fault injection interrupt handling routine is executed. The non-destructive fault injection method enables the on-board redundancy computer to have the capability of supporting fault tolerance verification and can realize non-destructive fault injection in a fault simulation experiment on the basis of not causing any physical damage and not destructing the reliability and the safe performance characteristic of a product.

Description

technical field [0001] The invention relates to a fault injection method supported by an airborne redundancy computer for fault tolerance verification. Background technique [0002] Airborne control systems that are closely related to flight safety usually use multi-channel redundancy computers with fault tolerance to achieve reliable execution of core functions in order to improve work reliability, such as three-channel redundancy computers with primary failure / working capabilities, secondary failure / Working ability four-channel redundancy computer, the fault-tolerant characteristics of the multi-channel redundancy computer platform need to be verified by fault simulation test, fault simulation test: inject faults into several calculation channels in the redundancy computer to verify its ability to identify, suppress, Ability to isolate and switch redundant components. How to inject the fault is the key to determine whether the fault simulation test can be performed. The ...

AI Technical Summary

Problems solved by technology

Among them, method 1 belongs to the high cost of product destructive testing. Although method 2 is not directly destructive, due to the design of the fault injection circuit, the calculated value of the number of failures of the product will inevitably increase (it will directly reduce the basic reliability MTBF index of the product), and at the same time additional consumption For system resources such as power, weight, and space of the product, method 3 has advantages over the first two methods but has potential safety hazards. If the interrupt service program is abnormally triggered during work and the real-time effective data is destroyed, the consequences will be unimaginable.

Images